pwn.ai (@pwn

pwn.ai

108 posts

pwn.ai

@pwn_ai

Built to breach. Agentic hacking ecosystem in the works. Our pentest product is now live.

New York, USA

pwn.ai

Joined September 2021

Following

8,224

Followers

Pinned
pwn.ai
@pwn_ai
Dec 26, 2025
🎄🎁 Here is a 0day unauthenticated root RCE affecting over 70,000 devices on the internet. pwn.ai/blog/cve-2025-… For our first post, we show how pwnai autonomously found a root rce affecting XSpeeder, over 8 months ago. To our knowledge, this is the first agent-found,
pwn.ai
CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting ~70,000+ Hosts
A critical zero-day vulnerability, CVE-2025-54322, has been discovered that enables Unauthenticated Root Remote Command Execution (RCE) in devices running Xspeeder's SXZOS firmware. These networking...
54K
pwn.ai reposted
Swissky
@pentest_swissky
May 17
The Search for AGI through Security: Introducing the World's First AI-Based Novel Attack Vector Researcher - @pwn_ai
pwn.ai
The Search for AGI through Security: Introducing the World's First AI-Based Novel Attack Vector...
We believe one of the clearest paths toward AGI is automating one of the hardest knowledge-worker roles in cybersecurity: the researcher who discovers novel attack vectors before the industry has...
3.1K
pwn.ai reposted
H4x0r.DZ 🇰🇵
@h4x0r_dz
Apr 14
Are we gonna see the new Attack Vectors in OWASP Top 10?
pwn.ai
@pwn_ai
Apr 10
Today we’re announcing something new in offensive security: the first AI system for novel vulnerability class discovery. An architecture built to discover undocumented exploit-building behaviors and previously unknown novel attack vectors that can later yield zero-days across
21K
pwn.ai
@pwn_ai
Apr 10
Today we’re announcing something new in offensive security: the first AI system for novel vulnerability class discovery. An architecture built to discover undocumented exploit-building behaviors and previously unknown novel attack vectors that can later yield zero-days across
29K
pwn.ai
@pwn_ai
Mar 30
🚨 ZERODAY: ImageMagick 🚨 Our autonomous pentester pwn.ai just dropped multiple zeroday chains in ImageMagick that achieve RCE and File Leak from a single .jpg or .pdf file, bypassing EVERY security policy (Default, Limited, AND Secure). 🤯 💥 Affects
43K
pwn.ai
@pwn_ai
Nov 14, 2025
Looks like nation-state actors are utilizing fully autonomous hacking engines. Wild to see them finally doing what we’ve already built, tested, and pushed way further at @pwn_ai. The future of hacking is autonomous!
Anthropic
@AnthropicAI
Nov 13, 2025
We disrupted a highly sophisticated AI-led espionage campaign. The attack targeted large tech companies, financial institutions, chemical manufacturing companies, and government agencies. We assess with high confidence that the threat actor was a Chinese state-sponsored group.
2.4K
pwn.ai
@pwn_ai
Jul 30, 2025
What we are building is insane. If vendors patched quicker, we would've showed you already. The sort of vulnerabilities pwn.ai is finding is on par with the top security researchers. preauth RCE after preauth RCE fully autonomously. Will drop a blog post soon.
pwn.ai — Autonomous Penetration Testing
From pwn.ai
1.9K
pwn.ai reposted
Octagon Networks
@OctagonNetworks
Jul 20, 2025
🚨 Octagon Networks has reproduced an unpatched SharePoint zero-day (CVE-2025-53770) now under active attack. Exploits leak MachineKey secrets, letting attackers hijack __VIEWSTATE for persistent code execution. If your SharePoint is exposed online, assume it’s compromised, take
2.2K
pwn.ai
@pwn_ai
Jun 24, 2025
We hacked @cluely's “Cheat on Everything” tool… and took full control of the cheaters computer. When a cheater uses Cluely, not only are we able to detect they are using Cluely but execute full commands on their computer. ‼️ Watch the full video 👇
00:00
6.8K
pwn.ai
@pwn_ai
Jun 24, 2025
This is insane! @Pwndotai has autonomously discovered an unauthenticated remote command execution vulnerability affecting over 70,000 servers. It found the entry point, developed the entire chain, created a proof of concept, iterated through the right issues and entirely on its
239K
pwn.ai
@pwn_ai
Jun 22, 2025
With little help with @pwndotai , which is an agentic hacking ecosystem we are building, we are able to get 1-click RCE in Cluely (@cluely). The exploit takes time to setup but it's straight forward and can be reached via many techniques, and an indirect prompt injection. The
7.1K
pwn.ai
@pwn_ai
Jun 6, 2025
Replying to @pwn_ai
One can use one of the many classes that ship with Roundcube to call a __destruct based deserialization RCE. For example using Roundcube\File\TemporaryFile, Crypt_GPG_Engine or other classes Full request PoC:
pastebin.com
Roundcuhe poc from octagon networks - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
717
pwn.ai
@pwn_ai
Jun 6, 2025
🚨 Heads up! We just reproduced CVE-2025-49113 affecting Roundcube. This vulnerability lets users run arbitrary commands via PHP object deserialization. If you’re using Roundcube, patch it right away as its not that hard to repo! #bugbountytips
00:00
1.5K